npm / multiparty

multiparty

What changed in multiparty 4, from its official release notes, upgrade guides and advisories. Also covers @types/multiparty. Sources checked 2026-10-27.

4 security1 new APIs and options3 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

multiparty 48 changes

Security 4

Fixes the vulnerability identified as CVE-2026-87908.
4.3.1release notes
multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception
4.3.0security advisory
multiparty vulnerable to ReDoS via filename parsing
4.3.0security advisory
Fixes three security vulnerabilities identified as CVE-2026-8162, CVE-2026-8161, and CVE-2026-8159.
4.3.0release notes security advisory

New APIs and options 1

Adds an option to restrict header size.
4.3.1release notes

Fixes and other changes 3

Handles chunked base64 transfer encoding.
4.3.1release notes
Fixes decoding filenames from Chrome and Firefox.
4.3.0release notes
Fixes form parsing when no part event listener is added.
4.3.0release notes